upgrade bcrypt